The IT Core of IBMS provides computing services for research data and administrative functions as well as the design and implementation of network communication. The services include the items below: management of computer and several satellites; setting up network communication to provide an electronic mailing system, gopher, and WWW services for the scientists and supporting staffs; management of financial data processing to provides accounting programs, inventory programs, and electronic spreadsheet for the administrative office; sponsorship of regular training courses and consultation for document processing, graphic , and presentation programs, statistic software, and databases; serving and maintaining computer facilities in laboratories and supporting offices; Finally, in collaboration with the Computer Center of Academia Sinica to offer periodic orientations and course especially designed for IBMS scientists and supporting staff.
整體流程
1.啟動會議
2.做現況分析
(所內網路、資訊架構、機房、資訊文件記錄+資通法 及ISMS要求)
3.獲得初步結論
4.將結論變成導入ISMS範圍選項1、選項2…
5.範圍經資安長決定
6.專案實作
7.專案產出
-----------------------------------------------------------------------
實際作業
1.活動摘要
專案時程:109-02-25日~109-12-11日
啟動會議1次、顧問輔導會議19次、內稽會議1次、管理審查會議1次
2.活動歷程
(1)界定、導入ISMS 範圍 生醫所官網、防火牆、網路設備、1F&4F機房
(2)成立推動小組
(3)文件規則管理 文件控管作業、最新文件、外來文件、文件變更申請
(4)政策、實作與量測標準制定 資通安全政策、程序書、資安目標量測
(5)資產盤點與風險評鑑方法論與實作 資產清冊、風險評鑑、風險處理
(6)制定與實作各項安控措施各項作業說明書、申請表、登記表、檢查表、
檢視表、版更記錄表
(7)營運持續作業管理與實作 BCP程序書、事件管理及處理單、緊急聯絡
人、 backup & recover
(8)內部稽核管理與實作 稽核程序書、內稽計畫及報告、持續改善與精進
(9)理審查與量測結果作業 管理審查會議簡報、會議記錄
收到詐騙信件內容,若收到類似信件,請直接刪除,謝謝。
The following is the phishing email. Spam Mail server has automatically blocked this letter address.
If you receive a similar email, please delete it directly, thank you.